pkinit_dup_identity_opts
krb5_error_code pkinit_dup_identity_opts(pkinit_identity_opts *src_opts,
retval = pkinit_dup_identity_opts(plgctx->idopts, &reqctx->idopts);